CVE-2014-3558 in Hibernate Validator
摘要 (英语)
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
预定
2014-05-14
披露
2014-09-30
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 71691 | Hibernate Validator Java Security Manager 权限提升 | 264 | 未定义 | 官方修复 | CVE-2014-3558 |